Static task
static1
Behavioral task
behavioral1
Sample
5da8602addc689d112ad7733118bd1353fc58ba449e2e16fcd2c10ea17185019.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5da8602addc689d112ad7733118bd1353fc58ba449e2e16fcd2c10ea17185019.exe
Resource
win10v2004-20240226-en
General
-
Target
5da8602addc689d112ad7733118bd1353fc58ba449e2e16fcd2c10ea17185019
-
Size
8.6MB
-
MD5
761f5310724faabc7c2a758868c6433d
-
SHA1
19e7f4361576fe9c7db043327ba3b13479a364be
-
SHA256
5da8602addc689d112ad7733118bd1353fc58ba449e2e16fcd2c10ea17185019
-
SHA512
0de3060a992bdcad1c2a9e0928c134daa889fc8f0e477870f352c8fe0f0e2f56bd956888d236ba5f40ed86d1c788f81acd82969f8ba2e020218d69def5a2a5d8
-
SSDEEP
196608:jA2LuA5lzw65EkPEMioUxzxIHMIb8PothiNfg6LRK5wfG:jLuAHT5EkPEMioUxzxIHMO8QiNfjM5wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5da8602addc689d112ad7733118bd1353fc58ba449e2e16fcd2c10ea17185019
Files
-
5da8602addc689d112ad7733118bd1353fc58ba449e2e16fcd2c10ea17185019.exe windows:4 windows x86 arch:x86
3cc6904e5d0dccad22b0bcf770dd82d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileInformationByHandle
FindFirstFileA
ExpandEnvironmentStringsA
PeekNamedPipe
SleepEx
FindNextFileA
FlushConsoleInputBuffer
SetFileAttributesA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
WriteConsoleA
SetEnvironmentVariableA
GetOEMCP
GetACP
SetStdHandle
SetConsoleCtrlHandler
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
LCMapStringW
LCMapStringA
CompareStringW
CompareStringA
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
TerminateProcess
ExitThread
CreateThread
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
RaiseException
RtlUnwind
ExitProcess
GetStartupInfoW
SetErrorMode
SetCurrentDirectoryW
SetEnvironmentVariableW
GetSystemTimeAsFileTime
LocalLock
LocalUnlock
lstrcpyA
GetLogicalDrives
QueryDosDeviceW
DeviceIoControl
GetComputerNameA
SetVolumeLabelW
CreateFileMappingW
FindResourceA
GlobalAddAtomA
GetProfileStringA
BackupWrite
BackupRead
BackupSeek
MoveFileExW
VirtualProtectEx
GetFileAttributesA
GetSystemDirectoryA
GetWindowsDirectoryA
CreateFileMappingA
VirtualQuery
FlushInstructionCache
CreateProcessW
GetExitCodeThread
TerminateThread
GetThreadContext
GetLongPathNameW
SetThreadLocale
OutputDebugStringA
LoadLibraryExW
LoadLibraryExA
EnumResourceLanguagesW
GetWindowsDirectoryW
FormatMessageA
OpenSemaphoreW
OpenMutexW
InterlockedCompareExchange
QueryPerformanceCounter
GlobalMemoryStatus
GetTimeFormatW
GetDateFormatW
SearchPathW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindResourceExW
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetTempFileNameW
GetProcessVersion
GlobalFlags
GlobalSize
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetProfileIntW
lstrcmpW
lstrcmpiA
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
GlobalGetAtomNameW
SuspendThread
SetThreadPriority
ResumeThread
MulDiv
SetLastError
GetModuleHandleA
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
ReleaseMutex
SetEvent
ReleaseSemaphore
CreateSemaphoreW
lstrlenA
InterlockedIncrement
GetVersionExW
GetSystemInfo
GetFileSize
ReadFile
CreateFileA
VirtualProtect
CreateMutexW
OpenEventW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileIntW
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentThread
GetLocalTime
GetCurrentDirectoryW
GetFileAttributesExW
InterlockedExchange
GetModuleHandleW
GetComputerNameW
ResetEvent
lstrlenW
LocalAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FormatMessageW
LocalFree
GetCurrentProcessId
FindResourceW
SizeofResource
LoadResource
LockResource
GetTempPathW
WriteFile
GetSystemDefaultLangID
GetUserDefaultLangID
FreeLibrary
GetPrivateProfileStringW
GetPrivateProfileStructW
GetModuleFileNameW
WritePrivateProfileStringW
MultiByteToWideChar
InterlockedDecrement
Sleep
FindNextFileW
GetLogicalDriveStringsW
GetDriveTypeW
CreateDirectoryW
CreateFileW
FindFirstFileW
FindClose
GetLastError
GetDiskFreeSpaceExW
GetVersion
LoadLibraryA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
LoadLibraryW
GetProcAddress
GetLocaleInfoW
lstrcpynW
WideCharToMultiByte
GetVolumeInformationW
DeleteFileW
CopyFileW
GetFileAttributesW
SetFileAttributesW
GetSystemDirectoryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
OutputDebugStringW
DeleteCriticalSection
GetCurrentThreadId
CloseHandle
CreateEventW
WaitForMultipleObjects
WaitForSingleObject
SetCurrentDirectoryA
user32
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageW
SendDlgItemMessageA
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
KillTimer
SetTimer
InflateRect
FillRect
ScrollWindowEx
IsDialogMessageW
SetWindowTextW
MoveWindow
SetMenuItemBitmaps
ModifyMenuW
GetClientRect
InvalidateRect
GetMenuCheckMarkDimensions
LoadStringW
IsWindow
MapWindowPoints
wvsprintfW
GetClassNameW
GetParent
OffsetRect
CopyRect
GetSysColorBrush
IsWindowVisible
DestroyIcon
TrackPopupMenu
EnableMenuItem
SetMenuDefaultItem
AppendMenuW
CreatePopupMenu
LoadIconW
PostMessageW
ShowScrollBar
GetMenuItemCount
GetSubMenu
LoadMenuW
PtInRect
GetWindowLongW
CallWindowProcW
SetWindowLongW
DrawFocusRect
DrawTextW
ReleaseDC
GetSysColor
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutW
GrayStringW
ValidateRect
GetMessageW
LoadAcceleratorsW
TranslateAcceleratorW
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
WindowFromPoint
MapDialogRect
CharUpperW
SetCursorPos
DestroyCursor
ShowOwnedPopups
SetWindowContextHelpId
WaitMessage
InvertRect
wsprintfW
GetFocus
RedrawWindow
GetCursorPos
ScreenToClient
LoadBitmapW
SendMessageW
GetWindowRect
EnableWindow
RegisterWindowMessageW
GetDialogBaseUnits
IsClipboardFormatAvailable
DeleteMenu
CharNextW
CopyAcceleratorTableW
GetNextDlgGroupItem
GetDC
GetSystemMetrics
CreateWindowExW
GetAsyncKeyState
EnumThreadWindows
GetKeyState
SetRect
GetMenuState
CheckMenuItem
InsertMenuW
GetDesktopWindow
UpdateWindow
SetCursor
LoadCursorW
SetRectEmpty
SetClassLongW
RemoveMenu
DefWindowProcW
SetWindowPos
DestroyWindow
DispatchMessageW
TranslateMessage
IsChild
PeekMessageW
SetActiveWindow
SetForegroundWindow
IsRectEmpty
IntersectRect
IsWindowEnabled
ShowWindow
SetFocus
GetDCEx
LockWindowUpdate
RegisterClipboardFormatW
SetParent
GetSystemMenu
GetClassInfoW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpW
RegisterClassW
GetMenu
GetMenuItemID
SetWindowPlacement
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
RemovePropW
GetMessageTime
GetMessagePos
GetLastActivePopup
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
MsgWaitForMultipleObjects
UnionRect
FrameRect
DrawEdge
GetWindow
SystemParametersInfoW
ClientToScreen
SetCapture
GetCapture
MessageBeep
HideCaret
ReleaseCapture
GetMenuStringW
DestroyMenu
PostThreadMessageW
FindWindowW
GetActiveWindow
PostQuitMessage
DrawStateW
DrawIconEx
CopyImage
LoadImageW
DrawFrameControl
EnableScrollBar
SetWindowRgn
DestroyAcceleratorTable
IsZoomed
GetMenuItemInfoW
GetClassLongW
IsMenu
DrawIcon
GetMenuDefaultItem
GetUpdateRect
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
CreateAcceleratorTableW
ToUnicodeEx
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardState
CopyIcon
CharUpperBuffW
SubtractRect
EnumChildWindows
GetClipboardData
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
GetWindowRgn
GetDoubleClickTime
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
WaitForInputIdle
SetWindowsHookExA
GetPropA
SetPropA
SetWindowLongA
GetClassNameA
IsWindowUnicode
SendMessageA
GetWindowLongA
RemovePropA
CallWindowProcA
CharNextA
DefWindowProcA
DefDlgProcA
GetClassInfoA
DrawTextA
GetWindowTextA
ExcludeUpdateRgn
ShowCaret
GetWindowTextLengthA
OemToCharBuffA
CharToOemBuffA
InSendMessage
DefFrameProcW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
CreateMenu
WindowFromDC
GetTabbedTextExtentA
GetTabbedTextExtentW
UnregisterClassW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetIconInfo
MessageBoxW
gdi32
GetTextColor
SelectObject
GetTextMetricsW
SetBkColor
SetTextColor
ExtTextOutW
GetTextExtentPoint32W
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgnIndirect
GetObjectW
CreateFontIndirectW
BitBlt
CreateSolidBrush
DeleteObject
RectVisible
TextOutW
Escape
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
LPtoDP
CopyMetaFileW
CreateDCW
GetBkColor
RestoreDC
SetBkMode
SaveDC
EnumFontFamiliesExW
GetStockObject
GetObjectType
GetPixel
Polygon
CreatePen
GetTextExtentPointW
GetDeviceCaps
RoundRect
GetDCOrgEx
GetClipBox
CreateBitmap
PatBlt
DeleteDC
StartDocW
SelectPalette
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
CreateDIBSection
Rectangle
Ellipse
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBitmap
SetPixel
Polyline
CreatePolygonRgn
AbortDoc
EndDoc
EndPage
StartPage
CreateRoundRectRgn
GetDIBits
RealizePalette
StretchBlt
OffsetRgn
GetRgnBox
GetPaletteEntries
CreatePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
FrameRgn
FillRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetBitmapBits
GetObjectA
CreateDCA
ExtTextOutA
GetTextExtentPointA
SetAbortProc
GetViewportOrgEx
StretchDIBits
GetCharWidthW
CreateFontW
GetWindowOrgEx
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceW
GetTextExtentPoint32A
DeleteMetaFile
CloseMetaFile
CreateMetaFileW
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
comdlg32
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
PageSetupDlgW
PrintDlgW
ChooseFontW
CommDlgExtendedError
ReplaceTextW
FindTextW
ChooseColorW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
EnumPrintersW
advapi32
RegEnumKeyW
RegCloseKey
LookupAccountSidW
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
GetAce
SetSecurityDescriptorDacl
LookupAccountNameW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegEnumKeyExW
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
GetUserNameW
SetFileSecurityW
RegConnectRegistryW
RegCreateKeyExW
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyW
RegEnumValueW
RegDeleteValueW
RegOpenKeyW
RegSetValueW
GetFileSecurityW
GetUserNameA
RegQueryValueW
shell32
SHFileOperationW
SHGetSpecialFolderPathW
CommandLineToArgvW
Shell_NotifyIconW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHAppBarMessage
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHFileOperationA
SHGetFileInfoW
comctl32
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
ImageList_SetOverlayImage
ImageList_Copy
ImageList_GetImageInfo
ImageList_GetIconSize
PropertySheetW
ImageList_Remove
ord17
ord13
ord14
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_Merge
ImageList_Read
ImageList_Write
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_DrawEx
ImageList_GetImageCount
oledlg
OleUIBusyW
ole32
RevokeDragDrop
OleTranslateAccelerator
IsAccelerator
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleSave
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateItemMoniker
CreateGenericComposite
OleRegEnumVerbs
OleRegGetMiscStatus
OleQueryCreateFromData
OleQueryLinkFromData
OleIsRunning
CoGetMalloc
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
OleCreateMenuDescriptor
ReleaseStgMedium
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CoTreatAsClass
DoDragDrop
OleSetMenuDescriptor
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
StringFromCLSID
CoTaskMemFree
CoCreateGuid
CreateFileMoniker
CLSIDFromProgID
OleRun
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
RegisterDragDrop
CLSIDFromString
CoLockObjectExternal
OleDestroyMenuDescriptor
olepro32
ord253
oleaut32
VarBstrFromCy
LoadRegTypeLi
CreateErrorInfo
SetErrorInfo
GetErrorInfo
VariantClear
LoadTypeLi
SysStringLen
SysReAllocStringLen
VariantTimeToSystemTime
SysAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
SafeArrayCreateVector
VarCyFromStr
SysAllocStringByteLen
SysStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
SysFreeString
VariantChangeType
SysAllocString
VariantInit
wsock32
gethostbyname
WSAGetLastError
WSACleanup
WSAStartup
WSASetLastError
gethostname
getservbyport
gethostbyaddr
getservbyname
select
__WSAFDIsSet
inet_addr
ntohs
getpeername
getsockname
accept
ioctlsocket
bind
htons
htonl
closesocket
recv
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
ntohl
getsockopt
listen
shutdown
setsockopt
WSACancelBlockingCall
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
winmm
PlaySoundW
rpcrt4
RpcStringFreeA
UuidFromStringW
UuidToStringA
UuidCreate
RpcStringFreeW
UuidToStringW
ws2_32
WSAIoctl
wldap32
ord33
ord79
ord35
ord301
ord200
ord30
ord26
ord50
ord145
ord213
ord22
ord45
ord27
ord41
ord46
ord32
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 868KB - Virtual size: 866KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 252KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ